Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: 5wz5FIfHc5ac1ZlmJkTVwM7O2okz3BcIZyIHXa+awag=
Subject key identifier: AB:ED:4A:A3:19:1C:8E:1D:AB:DB:A8:68:10:D3:7C:86:6C:26:A4:E5
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 01963275A33DE3363E788A6A12FACB531E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 14E7
Signing time: Mon 14 Apr 2025 04:01:32 +0000
Manifest this update: Mon 14 Apr 2025 04:01:32 +0000
Manifest next update: Tue 15 Apr 2025 04:01:32 +0000
Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: FgXJvycHDYSqef6aRGxl8C32t2St18SwvA1jOoK6mec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:75:a3:3d:e3:36:3e:78:8a:6a:12:fa:cb:53:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Apr 14 04:01:32 2025 GMT
Not After : Apr 15 04:01:32 2025 GMT
Subject: CN=abed4aa3191c8e1dabdba86810d37c866c26a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:54:38:fa:87:88:65:db:74:ee:5d:24:c7:
59:6d:7c:32:8c:24:de:5a:35:83:9a:ba:9e:eb:e8:
8b:d0:c3:79:26:0e:ea:ad:a7:5c:82:aa:48:4c:21:
cd:f9:3b:2f:ad:0d:5a:06:11:d2:d3:0a:e7:f2:f2:
d6:dc:c7:b1:d1:ab:cc:16:9d:cc:b2:d0:2e:13:d8:
8e:a9:89:17:43:5d:10:d9:80:dc:b7:fb:f6:99:c5:
6e:48:10:e7:5e:15:1b:6f:1c:6d:8a:d5:11:07:15:
6f:46:c2:f3:02:4b:a9:4c:2e:ca:be:0e:c1:06:36:
ff:f9:05:3f:b4:03:4b:5e:0d:97:ca:4d:a3:30:a3:
5c:12:2a:2f:1a:96:a1:d7:a6:fc:73:cd:d5:e8:0a:
58:38:41:c3:02:1f:7e:12:ed:fc:b1:30:2d:90:cd:
1b:2c:a3:cf:a4:30:19:9c:30:21:57:8d:5a:b8:05:
6b:b3:89:c4:c1:1e:7c:68:ff:2d:0d:c9:02:9a:16:
ba:44:49:a8:e2:03:e0:75:24:fa:80:0a:ee:35:4b:
2b:3a:19:9d:bb:98:75:41:bc:60:74:3f:c1:9b:c8:
76:ad:cc:6b:05:a9:b0:7b:30:eb:bc:67:e9:42:a7:
a7:88:c1:b3:69:c8:4d:c1:d3:c1:1a:d7:96:13:96:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:4A:A3:19:1C:8E:1D:AB:DB:A8:68:10:D3:7C:86:6C:26:A4:E5
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:3f:48:f6:7c:7b:bd:f8:cd:7b:c9:27:62:96:24:19:c1:
67:54:17:44:3b:49:bc:56:37:7e:9f:74:8d:56:ba:64:94:25:
a5:11:46:cd:b1:f4:0f:92:e4:19:87:d7:bb:59:4a:03:00:3e:
2f:09:b5:b7:11:5b:4e:3a:c7:08:3b:67:ce:c7:e7:96:46:d4:
12:68:54:5c:fa:62:cb:fd:47:cc:b6:94:b5:54:42:4c:18:01:
01:f0:d5:d7:09:83:9e:04:45:9b:d4:66:75:27:88:15:88:84:
81:59:74:b7:6c:04:52:d1:2d:e2:47:f9:14:56:5b:24:fd:a0:
11:e3:fe:6a:80:da:74:28:40:62:88:04:9b:3a:4c:1a:78:86:
3e:20:97:5a:0e:70:72:2e:96:92:b5:f3:23:85:cb:8b:63:e0:
f7:d5:51:43:51:e2:e3:f3:7c:87:6f:92:f6:e1:3e:06:95:b1:
dd:84:e7:84:8b:de:dd:53:3d:41:1c:e8:aa:00:39:96:88:c2:
55:1e:ff:01:02:cc:50:64:a3:ca:5b:c0:29:50:ca:c3:09:88:
8e:8f:92:f8:6f:e8:69:c4:c0:cd:6e:8e:03:12:5f:45:9c:2e:
7e:4e:83:f3:8f:c8:53:63:6f:55:59:c2:29:d8:a8:43:57:5b:
a0:1b:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:44:25 2025 by rpki-client